AmmyAdmin
Application logs
| Log path | Notes | Timestamp | Timezone |
|---|---|---|---|
| %ProgramData%\AMMYY\access.log | Connection, disconnection, amount of data transferred | YYYYMMDD-HH:MM:SS.SSSSSS* | Local |
* Assumption here about the month and day ordering based on this reference [1]
IP Addresses are for AmmyAdmin
Log analysis
| Search term | Description |
|---|---|
| Passed authorization remoteId= | Start of session, remote ID generated on Source host |
| ENDED authorized session, bytes recv/send | End of session |